Re: [leaf-user] Help! I can't create RSA Key

2003-03-21 Thread Charles Steinkuehler
Thitiporn Pornpirunrak wrote:
Dear all
 Anyone please help me. I try to create RSA Key using this command
ipsec rsasigkey --verbose 1024  mykey.txt
But After I run that command my bering box didn't show anything. I left my
bering box processes that command since yesterday but nothing happen.
Did I do anything wrong?
You have to type at the physical keyboard (not via a remote session like 
ssh) to generate enough true randomness for the ipsec routines to 
generate a key.

Since generating a key is so critical to security, the rsasigkey routine 
uses the random device that blocks if there is not enough true 
randomness (generated from things like user input), rather than the 
non-blocking random device which uses a psudo-random number generator.

Since firewall boxes typically have little true randomness, I frequently 
build keys on production machines (which also have much faster 
processors) and copy them over.

--
Charles Steinkuehler
[EMAIL PROTECTED]


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Help! I can't create RSA Key

2003-03-19 Thread Thitiporn Pornpirunrak
Dear all
 Anyone please help me. I try to create RSA Key using this command
ipsec rsasigkey --verbose 1024  mykey.txt
But After I run that command my bering box didn't show anything. I left my
bering box processes that command since yesterday but nothing happen.
Did I do anything wrong?

Thanx.




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Help! I can't create RSA Key

2003-03-19 Thread K.-P. Kirchdrfer
Am Mittwoch, 19. März 2003 12:34 schrieb Thitiporn Pornpirunrak:
 Dear all
  Anyone please help me. I try to create RSA Key using this command
 ipsec rsasigkey --verbose 1024  mykey.txt
 But After I run that command my bering box didn't show anything. I left my
 bering box processes that command since yesterday but nothing happen.

This one worked for me:
sec rsasigkey --verbose --random /dev/urandom 1024  mykey.txt

kp


---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html